MALICIOUS — CRITICAL
Проверка домена usdtclear.com на фишинг и безопасность
usdtclear[.]
usdtclear.com is currently flagged as a high‑risk generic phishing site.
- VirusTotal
- 3/91
- Blocklists
- No stored match
- Доступность
- Ошибка сервера · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
usdtclear.com — Ошибка сервера (HTTP 502). Тип мошенничества: Generic Phishing. Сводка доказательств: VirusTotal 3/91 (CRDF, Gridinsoft, SOCRadar); PhishDestroy score 71/100. Регистратор: Cloudflare.
Подробный анализ PhishDestroy AI ниже оставлен на английском, чтобы сохранить исходную криминалистическую запись.
Evidence Analysis
usdtclear.com is currently flagged as a high‑risk generic phishing site. The domain was registered on 7 May 2026 through Cloudflare, Inc. and resolves to the IP address 188.114.96.3, which is owned by a Cloudflare network located in Canada. The host serves over HTTPS using a Let’s Encrypt certificate (E8) and presents a page title “USDTClear · 안전하고 빠른 USDT 거래”, indicating an attempt to lure victims with promises of safe and fast USDT transactions. Technical fingerprints show a Node.js/Express stack, Google Analytics, Cloudflare Browser Insights and HTTP/3 support, all typical of a modern phishing infrastructure. The site returns HTTP 502, suggesting the backend is presently unavailable or mis‑configured, yet the domain remains active on at least one public blocklist and has been blocked by PhishDestroy. Gridinsoft assigns a trust score of 0/100 and three of ninety‑two VirusTotal scanners have flagged the domain, reinforcing the malicious assessment. No further content analysis is available, so the exact phishing workflow cannot be confirmed. Defenders should treat the domain as malicious, block DNS and HTTP(S) traffic to 188.114.96.3, monitor for related C2 patterns, and consider adding the domain to internal blocklists. Ongoing observation is advised in case the backend becomes operational.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Охват данных12 recorded checks
Процесс реагирования на угрозы
Статус в публичных блок-листах
Сохранённый снимок
Аналитика доменов
Технические сведенияDNS, SAN в протоколе SSL, временные метки
ICANN OVERSIGHT
Аккредитация и контекст RAA
Аккредитация и контекст RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Технологии · 6 identified
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.
nodejs.org 100% уверенностиExpress is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.
expressjs.com 100% уверенностиGoogle Analytics is a free web analytics service that tracks and reports website traffic.
google.com 100% уверенностиCloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com 100% уверенностиCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% уверенностиHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% уверенностиАнализ VirusTotal
Анализ производительности сайта
Google PageSpeed Insights — mobile performance audit of usdtclear.com · checked Jun 26, 2026
Доказательства и внешние отчетыIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Если вы ввели учетные данные, личную или платежную информацию или загрузили файл с этого домена, примите немедленные меры. Ниже приведены ресурсы, которые помогут вам сообщить об инциденте и защитить себя.
Сообщите об этом в местные органы власти
Выберите свою страну, чтобы получить официальные контакты по киберпреступности или создать проект жалобы →.